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RH MARKS 

In response to the non-final office action of November 1 , 2006, applicants ask thai all 
claims be allowed in \kw of die amendment to the cr> and me follow t remarks. 

Claims 1-3 1 arc now pending, of which claims 0 16, 25, and 26 arc independent. Claims 
i i - i I claims 2 Ix Supportfcr tl hi ents anj 

new us , mm _ !<(,«. i me ^ ^ i at, <> r m 1 p.^: . 0 One C" it uj .i« it' U. 

One 0'; referring to Pigs. 7 13. No nmv mait.ei has been introduced. 

Claims 1-26 have been rejected under 35 U.S.C. § i 01 as being directed to non-statutory 
subject matter. Chum 1-26 have been amended to address the Examiner's concerns. 

t >a c lai cl a I N " ve >ee u ended recite a c< a u n iabiemedii n 
(c aims !-24>i s ar apparatus (c ain - 2- < mi "m c in pris n execat ib c ins* etionsthat, when 

ec 1 e < perations ppiic nui e ns performed by i 

m 'i a o ul a URfd ( v k t ik id vt 

computer readable medium ot an apparatus comprising executable mst.ructs.ons that, when 
executed proof . semi co urn te. a\,,i;'oi i e n 1 »\ s U h cct n mo r % . j?j 
re Beauregard, 53 F.3d 1583, 1584 (Fed Cm 1905); AT&T Corp. \ Excel Comm. Inc., 172 

0 t52 <\ rtl v j ' / O) -As. M J i - v. H i 1 t I v w C 1 . ' * hi ' 

<- ' tt S * X slil i 1 !' 1 ! 1! u 1 .HvlU, i. vi l L'C „ Kil, 

and ^ Ob sv ' , c<- .« 

Claims 1-26 also have been rejected as being anticipated by Griffin (U.S. Patent 
•^ph 0 s Xpphc n vde hdnmml ofth 

^ v. 1 » v > - . ^ CM 1 v. e ! t t is 

0 , 25, and 2f>, as d^senVe beOw . 

I u s. ' r si itf -* ! e , t t t v v - 2 ^ s i -Of 2mm ! 

1 es i s i\ ,i w -> s m •> -p \ K i on Dpeie ms 
7 e data repos on neludes access control grou^ 2 m ckatmg access group c tries use? 

a vo^ deu, m iudmg a as ^utuu< nu'd jvu uonu > _ it 
access data entries. An access group entry identifies an access control group, a user access entry 



relates to at least one entry in the access control group data and identifies a user and an access 
control group, and a data object access data entry relates to at least one entry r the access 
contrt gro i an md dent es & object id an ccess s >ntro! group he (peradons 
pc'-totmed by the exeeirtafbv, -4 t i uAr e in en ^ - o m, o.i ot -< > v. v o<\ <o c 
an indication of a data object The operations also include searching the user access data to 
i e ! < i t 1 v i ro > ij] i - s . v f i _ 1 (i \ v au 

<. <.<. ! I s t C t 1 ! 1 i , ih 1 

operations furt ; id compm ig an ac es control g > ) idea led t c de> i bed use 

n> s\niL .o. i , ,o< jo c ^ k.u s ^ " !e „t - dv <■ a ess 

entry. <>> , s i - t e c ■>> i i ^ ^ « <.s '! t\ t > K 

i ) i e U <: oi y < -a be c 

die same access control group as the access eonuo] gtoup identified d> the nLok.Ped data object 
access data entry. 

Griffin d< esc e or suggess com] i wees* < a eendbed by the 

use. . v >x r i v - mkol ' * l u. Pud data 

»b c 1 enabling ok ndiCatcd user to access he nahe et. ! ; ibject 

ClKdtPAJi" ,t ^» s ,11 d^P i Ihv^l v v v.i s _ ( I v 

ode same accm c ol t p j> aovot >i group id *e >\ the toe titled data <>~ cci 
access data entry, as recited in amended independent claim 1 . 

i co toash C I'osiuvu ^ o> iei ku s m access <. t. * nx \ n + ok-- 
nrsed access control model. See C - [ r, tl i 

ok ^ Is ! v i t M ,S Ml ^ < ! s - O v ! n ' v. i > c Vt 

Gri wagrapl 8 s c < me or moi > abtii ties that di ss 

'oasu t s o v s T i ! o.undt. u v. v e m <. 4 v.v v m s n. 
to kieoui] i i , ton v. o i , \ ^ u >\ tit'., 

v -p e s m . pat ggvpn f 'U— . \\1 n case' tomrto ^ufen toe, the 

system accesses the role associated with the user, determines h kdc a capability included in the 
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role defines access to the resource, and allows the user to access the resource if the access criteria 
delredo\ f ^, pa - !<+> * met Vu n { > n ux - ^ [i s l \ K) 

Die system o ' rifrhi does >t enable sei < ".Oj dat objec >y comparing an 
-> u U u ail t^o ' e I ^ t si i^a^e^ 

c ntr groi v, cd d'bn a iau bicet access d i i i > ids i fiec v e dat object Rather, 
be sys em c f ( t ffi a >les a i s« to a< ess a sso i ee b] acce si \g a role o i ic ise? as d 
determining whether access criteria included i a capability of die role for the resource allows 

o Grifl c uggests parb troi group identified b> 

i Si C S, Is I I t l. ! i ! i U f M 

ebojue Itl is ; b< ib'txa^M. \-!c o<i,v.^ Je tsjicu 

- m i t ^ s in ^ i > ->s u gio < 

d.mn o< e dc u ledvsc nee s d^f .. Ov o j <e cc--.ee o m > , i si 'abvfu. 
^ fi<iu L ( vU ui- „'Mwi< a o t t . 1 wr uuo , 0 , -*<! a : 

^OtP OC l ' + U ( v rOOi glC l v ' < U - ri O ' v U'^i 

being the same t -- >t >l gro > - he acet ss n o grot > identified b> £ dent led data 
bjeci access d ende i t fore, for at least t 

reasons. < c t est reconsiderat i % > ec \ of ela I and its 

dependent claims 2-15. 

Independent claim 25 recites features similar to those discussed above with respect to 

el&in i inddoesst n the eo ex fan nn s \cc lingiy, \ i reasot lis issa 
bovew spec > dab s reques conside on vi val of the rejectioi 

o It- »t idta 11 I* 

\s amended independent aim 16 cu aeovnp er eadable storage met n ia 

srchAs c ep»st^v .wCxajtaricpciK i m A.ei ^ stc p." o; ipu < s 

1 ! t psJo-\U loiu.^c i 1 i v C d _ (. <_s . > ( i i v 1 d 

ch&raeterisi c itethod data i iciuding chat cteristie j icthc K icj ies 4 n 5 cs ess control ru c 
eiryidemsc tu .o -rioaio- id 1 i ^etui^ v, 1 um el 3 

to at least one entry in the access control rale data and identifies a method to determine a 
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characteristic for a user and a method to determine the characteristic for a data object The 
opci « is i . ect ! n irdicaik .1 ser and receiving ai k atk >f a dam object 

i >nc^ at t » < " a\a> a - t ,fovvUv ee adVmg a 

characteristic metU-..-d dam v mr\ and acvv?s;oo IK charuck-r.stx roeihod data in, idcrstidcd by 

til L as 'V (_ it K > Kli \ (. I i lv is fox t< 

ei tie ad icte tic for a use d idcntifi i ^ ! e s n se( ra em ic or; 

IV d <. ( ll L + i v. 0 <J s e r lis 

pedbmnr! * nab 1 :o dca-'o c to c wtemuc w< v so- dent; fit d h\ tha eh aoterisoc 
is tine arc d i ^ w > ie t -at form in 

nefood .krurc dM ^ t e v.e eu 1 m t method 

> i a c v t .. > ,jt generating ace - penults . \t 

ser to access > c< ( < i to 0 v s c > i ng d i e > 

characteristic for the data object. 

( n does no! describe < iggest determining the ceteris r the user b 
performii th thot < determine the ch ic s is edb eristic 

nethod da ca dek m tfo she i \ i i I c 

te hod d >. i v actciisnc ibr the dam oh)tct i ified by the chn eristic mc tod 

o ! i - ~ et gcn< ig ess centred a u l c ic scr to acccs he da 

ov'l.i . i r o' a . a v- st: „. ^c f j - ^ l <. as. k the 

oa nffi „t s u a 1 <^ ' a a i 

In contrast, the system of Griffin generates access control information by associating 
> s i i 1 es. See t paragraph (003 & i ; 

the system assoek es a ust h a role by comp t of the user with a le fiber and 

associates a resource x a i a capability in i [ ii aUribu?-s of i resource \ i a capability 
filter. See Gri Sui t. paragraph 3048 \ssoci; ± sser a th »k < j a resource 

withacapabi i \ provides ceess cor- ro rcct ise the roles and capabilities have a pre defined 
ac; t ss re ationship tc g f % role is con pose of a set of one os more c p fo ti s See Griffin at 
>. agi aph 0038] ] he s\ stem of ( irifftn docs not determine a characteristic for a user and a 
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characteristic for a data object bv p * m „ method? klcnuhcd by a characteristic method data 
entry and terate access control in formal ion id ned on the ci cteris t N 0 serbc 
I i!" i li f < <■ <.c < s * determine 

j 5 sera or res t i s will thoiti pcrtbrmi 

identified by it characteristic method data entry and generates access control information 
v del ersan reso he etermining whelhs i eris or ilie user is the 

-lis V ! z s 

v n> s t ! 1 t 5 re > , n ) t 1, a St v i k 

e - , - i h> the 
characteristic method data structure, determining the characteristic for the data object, by 
pe err o , k m k , . v. l . a . s' > t Cat s i 0 t't >\ t 
characteristic a eihod mac structure, ant generati tg access eonf d! tor rmatit n that permits the 
user to access the data object conditioned on the characteristic for the user being the same as the 
tm > cl r s L Oc o i cue t e e i de re i _ - o 1 1 u,. l 
I t h t | Ik s i ^ i . i i it < i re . „ f il I i 

( x 1 no i ~ < 

Independent claim 26 recites features similar to those discussed above with respect to 
h i ! ( i i w v i \ i re > i A v s r ^ i u -> i, 

above w th respect .to claim 1, t plieant reques reconsideration md witht awa) oi te rejection 
of kkpu-een t r 2 

"re ^. s 27-31 e c ireet i ec rem independent < i \ $s 
dn ncieaaoo ot hue acre re, ,re d bre aas a > ><&,! recsc vo'b . ^ rere te a he* deal ire m 
0, an; s i i a claims 2 e allowable 

It is believed that ail of the However e 3 e < e o 

enh to pt l e t o i^'tci i ce ^ 'irj>i,e in 

of that reje eoi c b ? e the arguments mad hove nay no re 

exh stive the nay be u ms for pate i of an r ail pen 1 is othe i.ras 
that have not been expressed. Finally, nothing in this reply should he construed as an intent to 
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- edeans ivsne o fr i' i ci mi t\.vp pL 1 \ n u < s , - , the 
amendment of any clan does not access; y signify concession of tiapatc ab I chum 

prior to its amendment. 

Applicants submit that, ah claims are in condition for allowance. 

Pursuant to 37 CFR §1 . 136, applicants hereby petition that the period for response to the 
« * > «■ - \ * 1 I ' c s> e ded 1 n > c ith a chiding \le^ !00" T 

The fee r the amount of S3 70.00 m payment of the excess claim fees ($250) and the one- 
no ui extension of n fee < * 1 2'';-} ;s b,:inc ■> concurrently hcrev, im on the Lk-ctrom.. f :bng 
svau n it s, -v wa , of 3 n : eoa is n icn?at e Ph v ape s a n o ^ex il^rges oi 
credits to Deposit Account No. 06 1050. 

Respectfully submitted. 



Allhl ^M^l 

Jere&y jfMonaido 
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